- Add ExtraBuildFlags for build flags that cannot be passed to configure.
- Add support for livepatches (JSC #SLE-20049).
- Generate ipa-clones tarball artifact when livepatching is enabled.

- glibc.rpmlintrc: Update for rpmlint2

• Files Changed
• Browse Source

- ld-show-auxv-colon.patch: elf: Fix missing colon in LD_SHOW_AUXV output
  (BZ #282539
- x86-string-control-test.patch: x86-64: Use testl to check
  __x86_string_control
- pthread-kill-fail-after-exit.patch: nptl: pthread_kill, pthread_cancel
  should not fail after exit (BZ #19193)
- pthread-kill-race-thread-exit.patch: nptl: Fix race between pthread_kill
  and thread exit (BZ #12889)
- getcwd-attribute-access.patch: posix: Fix attribute access mode on
  getcwd (BZ #27476)
- pthread-kill-return-esrch.patch: nptl: pthread_kill needs to return
  ESRCH for old programs (BZ #19193)
- pthread-mutexattr-getrobust-np-type.patch: nptl: Fix type of
  pthread_mutexattr_getrobust_np, pthread_mutexattr_setrobust_np (BZ
  #28036)
- setxid-deadlock-blocked-signals.patch: nptl: Avoid setxid deadlock with
  blocked signals in thread exit (BZ #28361)
- pthread-kill-send-specific-thread.patch: nptl: pthread_kill must send
  signals to a specific thread (BZ #28407)
- sysconf-nprocessors-affinity.patch: linux: Revert the use of
  sched_getaffinity on get_nproc (BZ #28310)
- iconv-charmap-close-output.patch: renamed from
  icon-charmap-close-output.patch (forwarded request 923222 from Andreas_Schwab)

• Files Changed
• Browse Source

- Don't create separate debuginfo packages for cross packages

- ldconfig-leak-empty-paths.patch: ldconfig: avoid leak on empty paths in
  config file
- gconv-parseconfdir-memory-leak.patch: gconv_parseconfdir: Fix memory leak
- gaiconf-init-double-free.patch: gaiconf_init: Avoid double-free in label
  and precedence lists
- copy-and-spawn-sgid-double-close.patch: copy_and_spawn_sgid: Avoid
  double calls to close()
- icon-charmap-close-output.patch: iconv_charmap: Close output file when
  done
- fcntl-time-bits-64-redirect.patch: Linux: Fix fcntl, ioctl, prctl
  redirects for _TIME_BITS=64 (BZ #28182)
- librt-null-pointer.patch: librt: fix NULL pointer dereference (BZ
  #28213) (forwarded request 911560 from Andreas_Schwab)

• Files Changed
• Browse Source

- Enable usrmerge in Factory always as it's default there
- Add conflict with pre-usrmerge filesystem package (forwarded request 900350 from lnussel)

• Files Changed
• Browse Source

- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)
- Drop glibc-usrmerge-bootstrap-helper package (forwarded request 899090 from Andreas_Schwab)

• Files Changed
• Browse Source

- tst-cpu-features-amx.patch: x86: tst-cpu-features-supports.c: Update AMX
  check (forwarded request 895836 from Andreas_Schwab)

• Files Changed
• Browse Source

- nptl-db-libpthread-load-order.patch: nptl_db: Support different
  libpthread/ld.so load orders (bsc#1184214, BZ #27744)

• Files Changed
• Browse Source

- Enable support for static PIE (bsc#1184646)
- select-modify-timeout.patch: linux: always update select timeout
  (bsc#1184339, BZ #27706) (forwarded request 885029 from Andreas_Schwab)

• Files Changed
• Browse Source

- nss-database-check-reload.patch: nsswitch: return result when nss
  database is locked (BZ #27343)
- nss-load-chroot.patch: nss: Re-enable NSS module loading after chroot
  (bsc#1182323, BZ #27389)
- x86-isa-level.patch: x86: Set minimum x86-64 level marker (bsc#1182522,
  BZ #27318)
- nss-database-lookup.patch: nss: fix nss_database_lookup2's alternate
  handling (bsc#1182247, BZ #27416)
- nss-revert-api.patch: remove
- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)

• Files Changed
• Browse Source

- Disable x86 ISA level for now (bsc#1182522, BZ #27318)
- nss-revert-api.patch: Workaround for nss-compat brokeness (bsc#1182247,
  BZ #27416) (forwarded request 876230 from Andreas_Schwab)

• Files Changed
• Browse Source

- Prepare for usrmerge (bsc#1029961) (forwarded request 873391 from Andreas_Schwab)

• Files Changed
• Browse Source

- Update to glibc 2.33
  * The dynamic linker accepts the --list-tunables argument which prints
    all the supported tunables.
  * The dynamic linker accepts the --argv0 argument and provides opportunity
    to change argv[0] string.
  * The dynamic linker loads optimized implementations of shared objects
    from subdirectories under the glibc-hwcaps directory on the library
    search path if the system's capabilities meet the requirements for
    that subdirectory.
  * The new --help option of the dynamic linker provides usage and
    information and library search path diagnostics.
  * The mallinfo2 function is added to report statistics as per mallinfo,
    but with larger field widths to accurately report values that are
    larger than fit in an integer.
  * Add <sys/platform/x86.h> to provide query macros for x86 CPU features.
  * A new fortification level _FORTIFY_SOURCE=3 is available.
  * The mallinfo function is marked deprecated.
  * When dlopen is used in statically linked programs, alternative library
    implementations from HWCAP subdirectories are no longer loaded.
  * The deprecated <sys/vtimes.h> header and the function vtimes have been
    removed.
  * On s390(x), the type float_t is now derived from the macro
    __FLT_EVAL_METHOD__ that is defined by the compiler, instead of being
    hardcoded to double.
  * A future version of glibc will stop loading shared objects from the
    "tls" subdirectories on the library search path, the subdirectory that
    corresponds to the AT_PLATFORM system name, and also stop employing
    the legacy AT_HWCAP search mechanism.
  * CVE-2021-3326: An assertion failure during conversion from the
    ISO-20220-JP-3 character set using the iconv function has been fixed. (forwarded request 868599 from Andreas_Schwab)

• Files Changed
• Browse Source

- aarch64-static-pie.patch: fix static PIE start code for BTI
  (bsc#1179450, BZ #27068)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859) (forwarded request 856525 from Andreas_Schwab)

• Files Changed
• Browse Source

- intl-codeset-suffixes.patch: intl: Handle translation output codesets
  with suffixes (BZ #26383)
- strerrorname-np.patch: string: Fix strerrorname_np return value (BZ
  #26555)
- sysvipc.patch: sysvipc: Fix SEM_STAT_ANY kernel argument pass (BZ
  #26637, BZ #26639, BZ #26636) (forwarded request 847890 from Andreas_Schwab)

• Files Changed
• Browse Source

- Use --enable-cet on x86_64 to instrument glibc for indirect branch
  tracking and shadow stack use.  Enable indirect branch tracking
  and shadow stack in the dynamic loader.  [jsc#PM-2110] [bsc#1175154] (forwarded request 844127 from rguenther)

• Files Changed
• Browse Source

- Keep nsswitch.conf in /etc for SLES15
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)
- ifunc-fma4.patch: x86-64: Fix FMA4 detection in ifunc (BZ #26534) (forwarded request 832940 from Andreas_Schwab)

• Files Changed
• Browse Source

- long-double-alias.patch: Fix build with GCC 10 when long double = double
- nscd-gc-cycle.patch: nscd: bump GC cycle during cache pruning
  (bsc#1171878, BZ #26130) (forwarded request 816574 from Andreas_Schwab)

• Files Changed
• Browse Source

- glibc-nsswitch-usr.diff: read /usr/etc/nsswitch.conf if
  /etc/nsswitch.conf does not exist
- Install default nsswitch.conf in /usr/etc
- Don't install gai.conf in /etc (forwarded request 807178 from Andreas_Schwab)

• Files Changed
• Browse Source

- Split off %lang_package (forwarded request 796476 from Andreas_Schwab)

• Files Changed
• Browse Source

- riscv-syscall-clobber.patch: riscv: Avoid clobbering register parameters
  in syscall
- ldbl-96-rem-pio2l.patch: Avoid ldbl-96 stack corruption from range
  reduction of pseudo-zero (CVE-2020-10029, bsc#1165784, BZ #25487) (forwarded request 784366 from Andreas_Schwab)

• Files Changed
• Browse Source